Governance starts before IT does.

AI governance is not only an IT question. The decisions that carry the most risk — which AI tools employees use, how people decisions are supported by algorithms, what your vendors are running on your data — are made by leaders who rarely have EA or architecture training.

This scan is for that room: the CEO who needs to know if the organisation is exposed, the HR leader who owns the policies, the legal team that has to answer for it. Eight questions, plain language, a report that shows what you have and what needs attention.

The report reflects what you tell us. It is not an audit or a certification, and it does not compare your organisation to others. It is a starting point for a conversation.

Eight areas that governance-focused leaders are asked about most often: AI inventory, accountability, employee guidelines, vendor AI, people decisions, incident readiness, transparency, and regulatory awareness.

Each area is self-reported on a one-to-five scale. The report groups areas into three bands — Established, Developing, and Needs attention — based on what you told us. There is no comparison to other organisations and no fabricated benchmark.

The EU AI Act, GDPR, and sector-specific AI regulations are moving quickly. This scan helps you understand which areas to prioritise before you sit down with a lawyer or a consultant.